Remove stuff relating to encrypting CSRF tokens

- PyCrypto dependency
- tangled.app.csrf.encrypt_tokens setting

CSRF tokens are now always masked using simple XOR with a pad.